Orrery

Orrery — a fast, tiny 3D model viewer for FBX, glTF and GLB.

Double-click a model, look at it. Works offline: no web server, no installer, and no network access at all (see Security).

Download

1. Get orrery-0.1.0-windows-x64.zip from the Releases page and unzip it to a folder you will keep (the registration stores the exe's path).
2. Optional: run register.ps1 (right-click, Run with PowerShell, or powershell -ExecutionPolicy Bypass -File register.ps1) to add Orrery to the Open with list for .fbx, .glb and .gltf.
3. Make it the default once: right-click a model file, Open with, Choose another app, Orrery, Always.

The exe is not code-signed, so Windows SmartScreen may warn on first run: choose More info, then Run anyway. The WebView2 runtime is required; it is preinstalled on Windows 10 and 11.

Features

• Opens the file passed as the first argument; drag and drop another file onto the window to switch
• Auto-framing, orbit / pan / zoom
• Studio lighting with an environment map
• Info overlay: triangles, meshes, materials, textures, bounding-box size, animation clips
• Plays the first animation, with a dropdown for the others
• Playback controls: play/pause (Space), timeline scrubber, speed 0.25x-2x, loop, clip dropdown, optional "lock root"
• Add animations from another FBX/GLB onto the loaded model ("Add animations..." button, or Shift+drop): clips are bound to the model's bones by exact name, then by normalised name (case, spaces/underscores, mixamorig:, Armature| prefixes ignored); tracks for bones the model lacks are dropped, a summary ("matched 52/65 bones") is shown, with a warning when few match. Position tracks are rescaled by the median bone-length ratio (FBX cm vs m) and applied relative to the model's rest pose. This is name binding, not a full retarget
• Textures: embedded (GLB, FBX), paths relative to the model (including backslashes and ..), the exact absolute path written in an FBX, TGA, and a fallback search by file name (or same name with another image extension) in the model folder tree and its parent folder tree; missing ones are listed in the overlay
• Loading screen (icon, file name, status) and a dark window from the first frame
• Clear error banner when something fails (for example missing FBX textures); the mesh is still shown

Key	Action
R	Reset view
G	Toggle grid
W	Toggle wireframe
B	Dark / light background

Build

Requires a Rust toolchain and the WebView2 runtime (present on Windows 11).

cargo build --release

The exe is target/release/orrery.exe (about 3.6 MB, three.js is embedded). Run the unit tests with cargo test --release.

Optional flags (used by scripts/smoke-test.ps1): --log <file> appends load results; --screenshot <png> saves the rendered view and exits; --lib <file> adds an animation library after loading; --wait <ms> delays the screenshot.

Register as a handler (current user, no admin)

After cargo build --release:

powershell -ExecutionPolicy Bypass -File register.ps1
powershell -ExecutionPolicy Bypass -File unregister.ps1

register.ps1 uses dist\orrery.exe if it exists, otherwise target\release\orrery.exe; pass -Exe <path> to register another copy (copy the exe somewhere permanent first, the registry stores its path).

register.ps1 writes only under HKCU\Software\Classes (ProgID Orrery.Model, Applications\orrery.exe, and OpenWithProgids for .fbx, .glb, .gltf). Windows does not allow programs to set the default app silently, so do this once: right-click a model file, Open with, Choose another app, Orrery, Always.

Security

Orrery only reads files, and only these: the model that is open, image files (png, jpg/jpeg, tga, bmp, webp, gif, ktx2) and glTF .bin buffers. Every served file must, after links and junctions are resolved, be inside the model's folder or its parent folder; the one exception is an image whose exact absolute path is written in the model file. Other file types, other model files, UNC paths and drive-relative paths are refused (unit tests in src/resolve.rs).

It never touches the network: the page has a strict Content-Security-Policy ('self', data:, blob: only), every URL with a scheme other than data: or blob: (http(s), ftp, ws, ...) found in a model is blocked and reported as "remote resource blocked: ", navigation away from the app and new windows are denied.

Icon

assets/icon.svg (48 px and up) and assets/icon-small.svg (16 to 32 px) are rendered into assets/orrery.ico by tools/make-icon:

cargo run --release --manifest-path tools/make-icon/Cargo.toml -- . 

Limitations

• FBX is read by three.js FBXLoader, which supports FBX 7.x; older versions (for example 6.1) fail with an error message.
• PSD textures cannot be decoded (a TGA/PNG with the same name is used if found). Missing-texture search covers only the model folder tree (5 levels) and its parent folder tree (4 levels); links and junctions are not followed.
• Parsing runs on the main thread: a very large FBX (for example a 40-clip library) can take several seconds; the loading screen is shown during the parse (its spinner is a CSS compositor animation, whether it keeps moving under a long parse was not verified) and the page is not interactive until the parse ends.
• Animation libraries need the same bone names; rigs with different names (for example Mixamo vs Unreal-style) do not match.
• No KTX2/Draco/Meshopt decoders are bundled; glTF files using those extensions will not load.

License

MIT, see LICENSE. three.js (MIT) is bundled, see THIRD_PARTY_NOTICES.